WORLD INTELLECTUAL PROPERTY ORGANIZATION 
International Bureau 




PCT 

INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(51) International Patent Classification 6 
H04L 12AM), G06F 13/00 



A2 



(11) International Publication Number: WO 98/00951 

(43) International Publication Date: 8 January 1998 (08.01.98) 



(21) International Application Number: 

(22) International Filing Date: 



PCT/FI97/00426 
July 1997 (01.07.97) 



(30) Priority Data: 
962724 
972718 



2 July 1996 (02.07.96) FI 
24 June 1997 (24.06.97) FI 



(71) Applicant (for all designated States except US): MORE 

MAGIC SOFTWARE MMS OY [FI/FI]; Kuortaneenkatu 
6, FIN-00510 Helsinki (FI). 

(72) Inventors; and 

(75) Inventors/Applicants (for US only): NIEMINEN, Mika, P. 
IF1/FI]; Nuottaniementie 25 D 12, FIN-02230 Espoo (FI). 
KALPIO, Karri [FI/FI]; Mflkelfinkatu 14 A 13, FIN-00510 
Helsinki (FI). RINKINEN, Jorma [FI/FI]; Tornitaso 3 A 5 # 
FIN-02120 Espoo (FI). 

(74) Agent: BORENIUS & CO. OY AB; Kansakoulukuja 3, FIN- 
00100 Helsinki (FI). 



(81) Designated States: AL, AM, AT, AU, AZ, BA, BB, BG t BR, 
BY, CA, CH, CN, CU, CZ, DE, DK, EE, ES, FI, GB, GE, 
HU. IL, IS. JP, KE, KG, KP, KR, KZ. LC, LK, LR, LS, LT, 
LU, LV, MD, MG, MK, MN, MW, MX, NO, NZ, PL, PT, 
RO, RU, SD, SE, SG, SI, SK. SL, TJ, TM, TR. TT, UA, 
UG. US, UZ, VN, YU, ARIPO patent (GH t KE, LS, MW, 
SD, SZ, UG, ZW), Eurasian patent (AM, AZ, BY, KG, KZ, 
MD, RU, TJ, TM), European patent (AT, BE, CH, DE, DK, 
ES, FI, FR, GB, GR, IE, IT, LU, MC, NL, PT, SE), OAPI 
patent (BF, BJ, CF. CG, CI, CM, GA, GN. ML, MR, NE, 
SN, TD, TG). 



Published 

Without international search report and to be republished 
upon receipt of that report. 



(54) Title: METHODS AND ARRANGEMENTS FOR DISTRIBUTING SERVICES AND/OR PROGRAMS IN A NETWORK 
ENVIRONMENT 

(57) Abstract 

The invention relates to methods and ar- 
rangements for distributing a user interface for 
communications and/or service or services avail- 
able in a communications network, wherein said 
user interface is independent, from used terminal 
means and/or used application or applications. Said 
method comprises the following steps: requesting 
an access to at least one desired service by said 
terminal means, identifying the type of said ter- 
minal means, identifying and selecting the desired 
service(s), establishing a customized connection be- 
tween the requested servicc(s) and said terminal 
means on basis of said identifying, and delivering at 
least one service program dependent from the type 
of the terminal means and the requested service to 
said terminal means. 



Klot 


film 




Mftfal 




BEST AVAILABLE COPY 



. <WO 9800951A2_I_> 



AL 
AM 
AT 
AU 
AZ 
BA 
BB 
BE 
BF 
BG 
Bl 
BR 
BY 
CA 
CF 
CC 
CH 

a 

CM 
CN 

cu 
cz 

DE 
DK 

EE 



FOR THE PURPOSES OF INFORMATION ONLY 
Codes used to identify States party to the PCT on the front pages of pamphlets publishing international applications under the PCT. 



Autrii 

Australia 

Azerbaijan 

Bosnia and Herzegovina 

Barbados 

Belgium 

Burkina Faao 

Bulgaria 



Brazil 
Belarus 



Central African Republic 

Congo 

Switzerland 

Cole d'lvoirt 

Cameroon 

Onaa 

Cuba 

Czech Republic 
Germany 



ES 
FI 


Spain 
Finland 


LS 
LT 


Lesotho 
Lithuania 


SI 
SK 


Slovenia 
Slovakia 


FR 


France 


LU 


Luxembourg 


SN 


Senegal 
Swaziland 


GA 


Gabon 


LV 


Latvia 


SZ 


GB 


United Kbgdoro 


MC 


Monaco 


TD 


Chad 
Togo 


GE 


Georgia 
Ghana 


MD 


Republic of Moldova 


TG 


GH 


MG 


Madagascar 


TJ 


Tajikistan 


GN 


Guinea 


MK 


The former Yugoslav 


TM 


Turkmenistan 


GR 


Greece 




Republic of Macedonia 


TR 


Turkey 


HU 


Hungary 


ML 


Mali 


TT 


Trinidad and Tobago 


IB 


Ireland 


MN 


Mongolia 


UA 


Ukraine 


IL 

IS 


Israel 


MR 


Mauritania 


UG 


Uganda 


Iceland 


MW 


Malawi 


US 


United Statei of America 


IT 


kaly 
Japan 


MX 


Mexico 


uz 


Uzbekistan 


JP 


NE 


Niger 


VN 


Viet Nan 


KE 


Kenya 


NL 


Netherlands 


YU 


Yugoslavia 


KG 


Kyrgyzttan 


NO 


Norway 


ZW 


Zimbabwe 


KP 
KR 


Democratic People's 
Republic of Korea 
Republic of Korea 


NZ 
PL 
PT 


New Zealand 

Poland 

Portugal 






KZ 


Kazakstan 


RO 


Romania 






LC 


Saint Lada 


RU 


Russian Federation 






U 


Lkchteasteia 


SD 


Sudan 






LK 


Sri Lanka 


SB 


Sweden 






LR 


Uberia 


SG 


Singapore 







BNSDOCID: <WO 960095 1A2_I_> 



WO 98/00951 



PCT/FI97/00426 



NCTWORK ENVIrSS^JSt^^ F ° R DI STRIBUTING SERVICES AND/OR PROGRAMS IN A 



FIELD OF THE INVENTION 

The present invention relates to methods for distributing various services and/or programs 
in a network environment to one or several of the users ie. clients thereof. The invention 
relates further to arrangements for performing the distribution operations. 

BACKGROUND OF THE INVENTION 

In the present arrangements user terminals are connected to a public communications 
network, which at the present is in most cases the Internet, through an Internet operator 
(Access Provider). The operator allows the user to enter the Internet and to establish 
further connections and access various services that are provided by various service 
providers. The skilled person is familiar with the Internet and the communications 
networks in general, and thus they are not explained in more detail herein than by men- 
tioning that the Internet is a global open communications network connecting a great 
number of local area networks, such as networks of various companies, universities and 
other organizations. These networks may be used by great number of independent work- 
stations and computer devices. An individual user may have a direct connection to these 
local area networks or they may be connected to them through a PSTN (Public Switched 
Telephone Network) or an ISDN (Integrated Digital Services network) using modems or 
similar devices. The two most often used communication protocols for the Internet are 
TCP and IP protocols (Transport Control Protocol and Internet Protocol, respectively). In 
most cases the service provider provides the various services by utilizing so called WWW 
(World Wide Web) and HTTP (HyperText Transfer Protocol) protocol to provide a 
graphical Internet interface for the user terminal which in this case is a data processing 
device, such as a microcomputer. The WWW contains eg. HTML documents (HyperText 
Markup Language) ie. "hyperdocuments", one such document forming one entity which 
can contain text, pictures, even moving pictures, sound, links to the other documents and 
even links to other services. The skilled person is aware that 'services' refers in this 
connection to various kinds of features, products, services such as electronic mail, elec- 
tronic phone book, entertainment, assistance and advisory services etc., advertisement, 
games, videos and similar which are accessible through various communications networks. 
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The services may be free of charge or then there may be some Service or Access Provider 
dependent means and arrangements for the payment transactions. 

The present arrangement has disadvantages eg. in that the operator does not usually 
provide anything else than the connection to the network, such as to the Internet. There- 
fore the user terminals have to be at least to some extend compatible with the operators 
hardware and software and especially with the hardware and software of the service 
providers. In most cases this is arranged such that each of the service providers has 
various versions of the same service such as to be compatible with various operators and 
also with various types of user terminals. This has lead into a situation in which the 
service providers are forced to implement several different version of their service 
programs etc. to be able to serve a wide variety of user which have accessed the service 
through various communications protocols, hardware etc., which in turn leads to problems 
in version management, updating and control and to an increase in the overall costs. In 
addition, the security and reliability, for instance for money transactions etc., has not been 
in a satisfying level. In the current situation the user must also have several different 
softwares or versions of the used software to be able to use the wide variety of the offered 
services. Usually every single service demands its own kind of program which has to be 
used in when accessing it. These various programs have to be separately provided and 
installed into the used data processing device prior to using the service. 

SUMMARY OF THE INVENTION 

Therefore it is an object of the present invention to overcome the disadvantages of the 
prior an solutions and to provide a new type of solution for accessing various services 
provided by means of communications networks. 

An object of the present invention is also to provide a method and an arrangement by 
means of which the accessibility of services in public communications networks is impro- 
ved. 

An object of the present invention is also to provide a method and arrangement which 
enable the provision of tailored user interfaces from a common source of services. 

An object of the present invention is also to provide a method and arrangement which 
enable an improved security and reliability of the connections between the user and the 
services. 
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It is also an object of the present invention to provide a method and an arrangement by 
means of which a centralized management of various services provided by various service 
providers is enabled. 

It is also an object of the present invention to provide a method and an arrangement by 
means of which the amount of different types of software and hardware needed by the user 
to be able to use the various services is reduced. 

An further object of the present invention is to provide a method and an arrangement, by 
means of which the amount of different software and hardware versions of the service 
providers is reduced, and in addition, by means of which the user is always provided with 
the latest possible updated versions of the software. 

Other objects and advantages of the present invention will be brought out in the following 
part of the specification taken in conjunction with the accompanying drawings. 

According one aspect of the invention, the objects are obtained by an method for distri- 
buting an user interface for communications and/or service or services available in a 
communications network, wherein said user interface is independent from used terminal 
means and/or used application or applications. Said method comprises the following steps: 
requesting an access to at least one desired service by said terminal means, identifying the 
type of said terminal means requesting said service(s), identifying and selecting the desired 
service(s), establishing a customized connection between the requested service(s) and said 
terminal means on basis of said identifying, delivering at least one service program 
dependent from the type of the terminal means and the requested service to said terminal 
means from a Connection Manager or by means of a Connection Manager at least for the 
duration of the established customized connection. 

According to an alternative aspect, the objects are also obtained by a method for distri- 
buting services to client terminal means, which is comprising the following steps: reques- 
ting a certain service by the client terminal means, identifying the client terminal means 
and the type of the connection between the client terminal means and a Connection 
Manager, generating in said Connection manager a terminal means profile on the basis of 
the identification, selecting a service program among a plurality of possibilities for a 
service program capable of executing said requested service on the basis of said terminal 
means profile, and delivering said customized service program to said terminal means 
from the Connection manager or by means of the Connection manager. 



WO 98/00951 



PCT/FI97/00426 



4 

According to a preferred embodiment the inventive arrangement for distributing an user 
interface for communications and/or service or services of a communications network, 
wherein said user interface is independent from used terminal means and/or used applica- 
tion or applications, comprises terminal means for requesting an access to at least one 
desired service and for executing said service, and a Connection Manager arranged to 
identify the type of the terminal means requesting said service(s), to identify and select the 
desired service(s), to establish a customized connection between the requested service(s) 
and the terminal means, and to deliver at least one service program dependent from the 
type of the connections and the requested service to said terminal means at least for the 
duration of the established customized connection. 

An alternative arrangement for distributing services to clients in a communications 
network comprises client terminal means for requesting and using a certain service and a 
Connection Manager for identifying the client terminal means and the type of the connec- 
tion to it such that a terminal means profile becomes generated, for selecting a service 
program among a plurality of possibilities for a service program capable of executing said 
requested service on the basis of said terminal means profile, and for delivering said 
customized service program to said terminal means. 

Several advantages are obtained by means of the present invention, since the solution 
provides a simple, reliable and controllable manner for the service distribution. The 
inventive solution provides an overall control and management of the connections such 
that eg. a secure user identification and a better security is obtained while the accessibility 
of various services is improved and eased for the user. The solution provides means for 
customizing the connections between the service providers and the users such that neither 
the service providers or the users will necessarily have to have compatible hardware 
and/or software. Each user is provided with a personal service according to the facilities 
he/she may have and/or preferences he/she may have defined. The service providers 
receive savings in version control and support as they do no longer need to have a number 
of different kinds of software and hardware compatible with various kinds of protocols 
and user hardware and software. The solution will allow the service providers to easily 
create new services without a need to concentrate on any specific technical questions 
concerning the framework. The communications becomes dynamically routed through the 
network or even through various networks. In addition, the user can access several servi- 
ces using the same software he/she is familiar with, and the user is not forced to install 
and learn to use separate programs for every single service. The invention enables also a 
centralized registration and/or billing proceedings for multiple services. 
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In the following the present invention and the other objects and advantages thereof will be 
described by way of an example with reference to the annexed drawings, in which similar 
reference characters throughout the various figures refer to similar features. It should be 
understood that the following description of an example of the invention is not meant to 
restrict the invention to the specific forms presented in this connection but rather the pre- 
sent invention is meant to cover all modifications, similarities and alternatives which are 
included in the spirit and scope of the present invention, as defined by the appended 
claims. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a schematic presentation of the basic arrangement according to the present 
invention; 

Figure 2 is a schematic presentation of the architecture according to one embodiment of 
the present invention; 

Figure 3 discloses a flow chart according to one embodiment of the present invention; and 

Figure 4 discloses the basic steps in accordance with one embodiment of the present 
invention. 

DETAILED DESCRIPTION OF THE DRAWINGS 

Figure 1 is a schematical presentation of one exemplifying arrangement according to the 
present invention. Users 1, or more precisely, terminal means of the users, are connected 
to an Internet Access Provider (IAP) 2. The user is the Client who wishes to use a certain 
service provided by a service provider 6 through a communications network or several 
networks. The terminal means 1 of the user can be a computer, such a PC (Personal 
Computer) or similar microcomputer or a workstation, or a telephone (either fixed land 
line telephone or a mobile telephone) or any other kind of device capable of establishing a 
connection to the IAP 2 or any other suitable Access Provider or network operator and 
receiving and/or sending data signals and processing them. The service provider 6 produ- 
ces, maintains and manages various services to be used by the user in a per se known 
manner. 

According to a preferred embodiment of the invention, no data relating to the use of the 
desired service or the programs necessary for the execution thereof is stored in the termi- 
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nal means, except the software required for establishing the connection from the terminal 
means to the Access Provider 2. 

In figure 1 the Access Provider 2 communicates with a separate Connection Manager, 
which in this example is referred to as an Internet Service Broker (ISB) 4. The Connection 
Manager or ISB according to the present invention is, in turn, capable of communicating 
with a plurality of the service providers 6. The ISB is arranged to establish a secure 
connection between the user 1 and the various service providers, to identify an individual 
user, to deliver the service request of the user to the service provider and to provide a 
transfer path for the services between the service provider 6 and the user 1. The ISB 
further comprises a database, which contains necessary information for establishing the 
connections, such as information about the connection data (addresses etc.) of the service 
providers and the users. 

The architecture of the ISB is illustrated in more detail by figure 2. The ISB 4 provides a 
centralized delivery of platform independent Client Programs to client or user terminals or 
interfaces 1 . The Client Program is a program which can be run independently in the user 
terminal, and which enables the user to connect him/herself to the required service. The 
distribution and customizing thereof occurs in the ISB. In case the terminal means are of 
such design that they cannot execute any form of the Client Program, the ISB creates then 
an User Agent for the service. The User Agent acts similarly towards the Client Program, 
but is executed in the ISB instead of the user terminal. 

The above means that most of the basic features of the Internet services (or services of 
other types of communications networks) are to be produced by the ISB. The distinctions 
and incompatibilities between various services are handled by tailored or customized stubs 
for every Client Program/service server pair. These well defined interfaces are made 
public so that the service providers connected to the ISB can easily generate their own 
client software to fulfil their specific needs. At present the most preferred means for 
producing such "Mobile Code" programs is the Java^M programming language developed 
by Sun Microsystems Inc. 

The connections between the user and the ISB are provided by public communication 
network(s), such as the Internet, or private or private like communications network(s), 
such as PSTN (Public Switched telephone Network) or ISDN (Integrated Services Digital 
Network) eg. through a modem bank, public Internet with a verifiable origin, a verifiable 
Intranet, an ISB aware telephone to Internet gateway in a telephone switch or by any 
combination of above. The networks are capable of supporting various protocols and/or 
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communications methods, such as TCP/IP (Transmission Control Protocol/Internet 
Protocol), UDP (User Data Protocol), HTTP (HyperText Transfer Protocol), FTP (File 
Transfer Protocol), GSM Short Message System (SMS) etc. The calls or requests from the 
terminal means 1 are routed by a suitable routing or switching means 2 to the ISB, such as 
by means of a local exchange, Internet Access provider or similar means for switching the 
call to the ISB. Suitable means for routing are per se known by the skilled person, and 
thus not explained in more detail. It is to be noted that in some instances the ISB may even 
be implemented within the switching apparatus of the Access Provider, and thus no 
routing outside the switching means 2 is required. 

Each service managed by the ISB 4 has a special external adapter 3 which is arranged to 
convert the service specific protocol messages to be compatible with the internal data 
structures of the ISB. These converters 3 are customized for various services by modifying 
the generic external adapter. 

The ISB 4 comprises further an internal adapter 5 and access points for the various exter- 
nal adapters 3. The internal adapters are enabling the services to have several service 
client programs of different kinds for several kinds of terminal types and communications 
methods. In other words, the arrangement is such that it enables the ISB to communicate 
with various kinds of services and/or service programs through various kinds of connec- 
tions and/or protocols. 

The ISB is arranged to handle internally only the headers or address information of the 
message packages, which are addressing the packet destinations and sources. This enables 
the ISB to handle the messages flow from and to the registered (and thus known) services. 

The ISB introduces several kinds of Service Client Programs for individual services. The 
appropriate Client Program is deducted by the ISB, ie. the ISB is capable of modifying the 
requested service programs such that they will become compatible with the terminal means 
which requested to receive that certain service program or service including that program. 
Generally, it can be said that every service is mapped once into the ISB and many times 
out from the ISB. This means that for instance a telephone number database can offer it's 
services to various kinds of user groups, such as to computer users having a graphical user 
interface such as the World Wide web and the cellular phone users with a short message 
capability, by simply defining different Client Programs for each of these various user 
groups. 
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The ISB Service Client Program is implemented using a mobile code or user agents. In 
this context the mobile code means program or programs that can be loaded through a 
network and subsequently executed at the terminal end without a need for any other 
compilations of other measures. The following known trade names are referred to as 
examples of possible mobile codes: Java, Java Script, ActiveX and Telescript. 

The protocols between the ISB and the Client and the ISB and the Service (ie. ISB-Client 
and ISB-Service) are implemented eg. by the service providers in a per se known manner. 
The Service-Client messages are capsuled or set inside ISB's own carrier messages within 
the ISB. It is preferred that the ISB concept only suggest it's own formats which then 
would enable it to offer an additional value added service or services. This additional 
embodiment will be discussed in more detail later. However, when operating in public 
networks, such as in the Internet, it is expected that most protocols are based on TCP/IP. 

As is apparent from the above, the actual services are implemented outside the ISB. The 
mapping of them to several Client Programs by means of using the ISB allows an usage of 
the services by a large number of users and what is more essential, by various types of 
user terminals. The ISB does not present any restrictions whatsoever to the internal 
implementations of the service(s). 

The server architecture of the ISB is intentionally kept very simple. Basically it is a collec- 
tion of services which have a centralized management in the ISB server. As explained, the 
ISB comprises service stubs (well defined interfaces to the services) and outside the "core" 
it comprises public interfaces that implement the functionality of the stubs. This helps to 
keep the structural blocks small, robust and manageable. The ISB may contain a WWW 
server (World Wide Web server) that provides a subset of the functionality defined in the 
HTTP and HTTPS (HyperText Transfer Protocol Secure) protocols. Thus the first part 
thereof may be a light WWW server similar to the Web Request Broker™ by Oracle 
Corporation. It parses the request, transfers and possibly also dynamically builds Web 
Pages and Client Programs and provides the client with means for establishing new 
connections to the other parts of the service. 

It is preferred that the ISB comprises a build-in Customer management Service. This 
creates, maintains and stores the user profiles and gives the external services an appro- 
priate information about the customers and eg. their pre-defined selections and preferen- 
ces. Customer Management Service also manages the connections to the internal database 
of the ISB. 
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The ISB itself can also be seen as a service. Any number of ISBs could be linked together 
in order to scale the system. Thus several ISBs would form a hierarchy where the various 
ISBs acquire services from each other but where the Client would still be served by means 
of the closest possible server or the "home" server. 

The following gives an example of the hardware that could be utilized in the invention. 
However, the skilled person understands that other devices and software could also be 
used as well without departing from the scope of the invention. 

The client or user who wishes to use the service provided by the ISB does not need any 
expensive equipments. The Java client can be run at an ordinary PC or similar having eg. 
an UNIX/X Windows™ or a Windows™ based windowing system. Internet TCP/IP 
connection is run over PPP (Point-to-Point) protocol. The used modem is preferably at 
least a V.34 modem at speed 28.8 kbit/s or an ISDN modem at speeds 64 or 128 kbit/s. 
The ISB itself is independent from the speed of the connections. Even ADSL modems 
capable to speeds of 2 Mbit/s are considered as appropriate in the future. 

The ISB is implemented in a separate workstation (eg. Sun™ workstation) which is 
connected to the external services which in turn are implemented in a separate computers. 
The used network is eg. a physically separated communications network or a global 
communications network comprising well secured connections. The ISB itself does not 
cause much load on the workstation but since the operation requires a lot of I/O power, 
good network interfaces are required (ie. fast network cards, enough bandwidth etc.). The 
connections between the various components are preferably implemented using the 
TCP/IP protocols and fast local area networking techniques. 

The inventive arrangement provides the user with a transparent but secure communications 
between the user and the service. The Connection Manager of the invention takes care of 
the task of establishing the connection and, if desired, the encryption of the data. Corres- 
pondingly, the Connection Manager implements features which are common to all services 
and value added services, such as are the payment interfaces. 

The main principles of the operation of the invention will now be discussed with a general 
reference to the flow charts of figures 3 and 4. 

The service provider registers all services provided by him to the database of the Connec- 
tion Manager or ISB. A Client Program which is independent from the terminal means is 
established for each of the services offered through the Connection Manager. It is assumed 
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that the data transfer path between the service provider and the Connection Manager is 
made secure. The service provider defines the data to be transferred such that it depends 
from the application, but preferably such that the Connection Manager always delivers at 
least the identity data of the user. When the user selects eg. by means of a web browser a 
service which requires an identification of the user or a secure transfer path, the request of 
the user is delivered to the Connection Manager. 

The user places a requests through his/hers the terminal means for a certain service. This 
can be done eg. by selecting a certain hypertext link in a hypertext document, such as a 
HTML (HyperText Markup Language) page in the World Wide Web, WWW, or by 
means of numeric keys of a mobile station. Eg. when using the WWW, the user usually 
starts a WWW browser program and from there select an Universal Resource Locator 
(URL) address of the resource he/she wants to access. Thereafter the terminal sends a 
request for the service to the Connection Manager (in this example this is an Internet 
Service Broker, ISB). The format of this request may vary, and it depends from the type 
of the used terminal. A suitable format could be, for instance, a HTTP or TELNET 
(Text-Based Virtual terminal) protocol, a telephone tone dialling or a Short Message 
Service (SMS) a digital cellular phone, such as the GSM. 

After receiving said request from the user terminal, the ISB creates an unique identifier to 
be used in real time management of the user connections. By using the information inclu- 
ded in the first request of the particular connection the connection identifier is validated 
and adapted with the identity of the requested service access point. The format of the 
request and the data embedded into it enables the ISB to identify the type of the terminal 
and the capabilities and performance thereof. It is possible that in some instances this takes 
a longer and more complicated hand-shaking, i.e. exchange of information between the 
terminal and the ISB. For example, connections coming via a modem bank are identified 
as originating from terminals that can handle basic data transfer using certain protocols, 
connections using SMS gateway are identified as being SMS capable and so on. After this 
the ISB knows the minimum capabilities of the used terminal means. 

The Connection Manager, ie. the ISB in the example, may generate a tailored identifica- 
tion program for each of the single connections. A connection particular identifier (ID) 
and a possible connection particular encryption key generated by the Connection Manager 
are attached to the identification program delivered to the user. In addition, the Connec- 
tion Manager may register the service request into the database thereof and is thus capable 
of sending an advance information of a possible user in the near future to the requested 
service. 
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At this point the ISB establishes communication medium with the user. In case the termi- 
nal is capable of processing or executing the Mobile Code, the ISB then delivers an 
appropriate Client Program enabling a simple dialog with the user. If the terminal cannot 
execute programs and thus maintain the connections with the ISB, the ISB will then create 
an user agent for the connection. The user agent is a computer program or a computer 
program connected to an external peripheral that transforms the requests and replies sent 
by the ISB into a form that the terminal is capable of handling, and correspondingly 
transforms the requests and replies by the user into a form the ISB can handle, and stores 
the state of the connection in such a way that it can be seen as an user with extended 
capabilities by the ISB. Thus said agent processes, sends and receives the terminal 
messages and holds the state of the current actions. An example of the user agent is the 
GSM short message handler which sends and receives GSM short messages and by this 
way creates an interface for the user. 

After the ISB has successfully identified the type of the terminal and the requested service 
it may try to automatically verify the identity of the terminal, ie. without any help from 
the user. This is possible when the terminal has sent the service request by using some 
supported media. For instance, automatically verifiable media could consist of connections 
through telephone switches or modem banks that can be verified directly from the tele- 
operators or Internet Access Providers (IAP) databases (eg. the A-number information), 
connections from an Intelligent Network (IN) or connections carrying an IN identification 
data or requests carrying verified electronic signatures. 

In case the Connection Manager is able to identify the terminal automatically and the 
requested service is such that it is possible for the identified user to access, the necessary 
information is sent to the service, and the service accepts this information to form the 
bases for the subsequent operations thereof. 

On the other hand, in case the terminal identity cannot be identified automatically, or the 
requested service requires a personal or otherwise more secure identification, the ISB will 
deliver a separate identification program to the user. This program is selected and tailored 
in accordance with the information received in said first service request. This program 
executed in the user terminal may eg. ask from the user various identification data, such 
as the user identification and password, and thereafter transmit the user data to the ISB. 

After the above stages, the terminal and/or even the user thereof, when necessary, are 
successfully identified. The ISB does not allow any unidentified or otherwise invalid 
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connections either from an individual user or from the terminals, and thus all service 
request established through the ISB to the services are secure and reliable. 

At this stage it is possible for the ISB to customize the client/agent software based on the 
information received and/or preferences of the user. Thus, subsequent to the identifica- 
tion, the ISB selects an appropriate service program among a plurality of alternative 
programs for executing the desired service and delivers it to the user. Said programs are 
selected to match the requirements of the user terminal. This means eg. that a web page or 
a browser executable Java program (applet) is given to a web browser and SMS text 
message is given to a GSM telephone. The requirements may also be predefined according 
to the personal requirements of individual users, ie. such that each user is provided with 
an individual service program or profile. 

This platform or terminal dependent service program is adapted with an appropriate 
connection specific information, such as data encryption key or encryption key block to 
enable a secure communication, information about the user or his/hers earlier service 
history, such as personal preferences and settings. The service program is structured such 
that it cannot be used outside the current connection thereof to the ISB . 

The service program is not necessarily an executable mobile code. It can also consist of 
concept of providing the user with additional rights to the already available resources or to 
allow a wider use of the network capacity. Thus no actual program is delivered to the user 
in this case. An example of this kind of operation is an online allocation of network 
bandwidth. 

After the delivery, the user is able to use the Client Program and thus the service. The 
communications and data transfer between the user and the ISB, and the service and the 
ISB during the use of the actual service may be arranged to occur either via the ISB or 
directly between the user terminal and the service, while the ISB only monitors the 
connection. These connection types may also be changed during the connection. Indepen- 
dently from the type of the connection, the ISB receives predefined information from both 
parties concerning eg. the state of the connection and an information from the release of 
the connection, which information can be used eg. for charging purposes. In either case, 
the ISB manages the service connection during the entire duration thereof. It is also 
responsible of possible encryptions between the service providers and the users. 

At the end, the ISB is notified when either the user or the service requests to end the 
session. The ISB may also in certain cases disconnect the connection without receiving any 
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specific request for such, eg. when a potential security breach is found or an uncoverable 
network error occurs. 

At the closing stage, the ISB sends an end message to the log and thus updates it and 
deletes the security keys and/or other possible keys and data relating to the particular 
service session. The current connection between the ISB and the user terminal may, 
however, be maintained as the user may wish to use another service. 

Should a critical network error or a security break occur, the ISB may be arranged to 
terminate the ISB connection(s) and all currently active service programs. After this the 
ISB connection data is cast aside and the user must be re-identified when he/she wishes to 
use the service for the next time. 

The arrangement is preferably such that no Client Programs, parts thereof or state infor- 
mation of the use will remain intentionally in the user terminal after the connection is 
released. Even in such case that the user would have copied the Client Program, the use 
thereof would be impossible without the connection keys generated by the Connection 
Manager. 

It is also possible that the Connection Manager processes various information collected 
during the use. For instance, in case the services used by the user comprise purchase of 
products of various service providers, eg. a purchase of a product by means of a common 
electronic money, the Connection Manager is able to handle the distribution of the address 
information to the service providers. In addition, added value services, such as market 
researches based on the connection information, are possible. 

The following is a more detailed description of one of such value added services enabled 
by means of the invention, and more precisely, a description of billing of various services 
and/or goods purchased through a communications network, such as Internet. According 
to the solution, the ISB manages the payment transactions instead of the individual service 
providers, as is the case in the prior an solutions. The ISB creates a common application 
programming interface for the billing, user identification and security connections. They 
are offered as easy-to-adopt add-ons that are used to connect to the desired services. This 
enables an easy, fast, cost efficient and straight-forward creation of new services. 

As the user identification and the secure communication path are provided in accordance 
with the present invention, the billing information can be sent safely. The ISB billing 
service itself is directed to the service providers and not to the users. It is a well defined 
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interface that implements a generic billing method. More precisely, it comprises two 
separate interfaces: an interface that is offered to the service providers and an interface 
that is used for connections to the external billing services. The billing module within the 
ISB core (see. fig 2) manages the conversions between the two entry points. It has also a 
connection to a Client Program in the user terminal (via the ISB) that is used for reques- 
ting a confirmation that the transactions is to be allowed before it is actually accomplis- 
hed. Ii may also ask for the type of payment (eg. by credit/from balance in the user's 
account). Thus the user has to always confinn the payments. 

The billing itself is a two stage operation. The service must first ask the ISB whether the 
user can be charged or not (eg. if he/she does have credit or balance left in his/hers 
account). The user may also give a limitation for the maximum amount to be debited. 
Then the ISB selects the billing method for that user and asks for the user's permission to 
prepare the bill. The result (yes/no) is then reported to the service. After the service is 
completed, the service sends the actual billing request to the ISB billing service and thus 
activates the actual payment (or billing) procedure. 

Thus, the invention provides apparatus and methods by which a significant improvement 
can be achieved in the area of distributing various services through communications 
networks. The solution according to the present invention is easy and economical to 
implement by per se known components and reliable in use. It should be noted that the 
foregoing examples of the embodiments of the invention are not intended to restrict the 
scope of the invention defined in the appended claims. All additional embodiments, 
modifications and applications obvious to those skilled in the art are thus included within 
the spirit and scope of the invention as set forth by the claims appended hereto. 
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Claims 

1. A method for distributing an user interface for communications and/or service or 
services available in a communications network, wherein said user interface is independent 
from used terminal means and/or used application or applications, said method comprising 
the steps of: 

requesting an access to at least one desired service by said terminal means, 
identifying the type said terminal means requesting said service(s), 
identifying and selecting the desired service(s) 

establishing a customized connection between the requested service(s) and said 
terminal means on basis of said identifying, 

delivering at least one service program dependent from the type of the terminal means 
and the requested service to said terminal means from a Connection Manager or by means 
of a Connection Manager at least for the duration of the established customized 
connection. 

2. A method for distributing services to client terminal means, comprising the steps of: 
requesting a certain service by the client terminal means, 

identifying the client terminal means and the type of the connection between the client 
terminal means and a Connection Manager, 

generating in said Connection manager a terminal means profile on the basis of the 
identification, 

selecting a service program among a plurality of possibilities for a service program 
capable of executing said requested service on the basis of said terminal means profile, 
and 

delivering said customized service program to said terminal means from the Connec- 
tion manager or by means of the Connection manager. 

3. A method according to claim 1 or 2, characterized in that the identifying step 
comprises either automatically accomplished identification of said terminal means or, in 
case the automatic identification cannot be accomplished or is not sufficient, sending of a 
specific identification program to said terminal means. 

4. A method according to claim 3, characterized in that the specific identifica- 
tion program is individually customized for each individual connection between said 
terminal means and said Connection Manager on the basis of the results of the initial 
identification. 
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5. A method according to any of the preceding claims, characterizedin that the 
data to be transferred from the Connection manager to the terminal means is defined on 
basis of the information provided by the identifying step so as to be compatible with the 
terminal means. 

6. A method according to any of the preceding claims, characterized in that said 
selection of the service(s) to be delivered to the terminal means is further based on indi- 
vidual preferences and parameters of the user. 

7. A method according to any of the preceding claims, characterized in that it 
further comprises overall management and/or monitoring of the communications and the 
state thereof between said terminal means and the service during the entire duration of the 
connection. 

8. A method according to any of the preceding claims, characterized in that it 
further comprises provision of value added services, such as billing services, by means of 
the Connection Manager. 

9. A method according to any of the preceding claims, characterized in that it 
further comprises the steps for creating an user agent for such connections and/or terminal 
means which are not capable of handling the requested service programs, and thereafter 
executing said service program by means of the user agent in the Connection Manager 
instead of said terminal means. 

10. A method according to any of the preceding claims, characterized in that it 
further comprises a step for sending a client program from the Connection Manager to the 
terminal means. 

11. A method according to any of the preceding claims, characterized in that it 
further comprises producing of at least a part of the features of various services by means 
of the Connection Manager. 

12. A method according to any of the preceding claims, characterized in that it 
further comprises a step for linking at least two Connection Managers together. 

13. A method according to any of the preceding claims, characterized in that it 
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further comprises a step for removing or invalidating all programs delivered to the ter- 
minal means from the Connection Manager at the time or after the connection is released. 

14. An arrangement for distributing an user interface for communications and/or service 
or services of a communications network, wherein said user interface is independent from 
used terminal means and/or used application or applications, said arrangement comprising: 

terminal means for requesting an access to at least one desired service and for 
executing said service, 

a Connection Manager arranged to identify the type of the terminal means requesting 
said service(s), to identify and select the desired service(s), to establish a customized 
connection between the requested service(s) and the terminal means, and to deliver at least 
one service program dependent from the type of the connections and the requested service 
to said terminal means at least for the duration of the established customized connection. 

15. An arrangement for distributing services to clients in a communications network, 
comprising: 

client terminal means for requesting and using a certain service, 
a Connection Manager for identifying the client terminal means and the type of the 
connection to it such that a terminal means profile becomes generated, for selecting a 
service program among a plurality of possibilities for a service program capable of exe- 
cuting said requested service on the basis of said terminal means profile, and for delive- 
ring said customized service program to said terminal means. 

16. An arrangement according to claim 14 or 15, characterized in that the 
Connection manager comprises: 

interface means towards various services, 
interface means towards said terminal means, and 

adapter means for adapting the service program(s) such that the service program(s) 
become(s) compatible with the terminal means. 

17. An arrangement according to claim 16, characterized in that the adapter means 
comprise further external adapter means arranged to convert the service specific protocol 
messages to be compatible with the internal data structures of the Connection Manager and 
an internal adapter means arranged to enable the Connection Manager to communicate 
with various kinds of services and service programs through various kinds of connections 
and/or protocols. 
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